This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.mft
File:                     674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.mft (raw, json)
Hash identifier:          I4gE7fMUeDGnHTEROMyelzj04LvHHFcWkp78thrfl/M=
Subject key identifier:   47:E1:23:68:1D:4B:24:CE:47:C0:B4:30:62:2E:4C:9F:1F:F8:76:EA
Authority key identifier: 67:4C:1E:AE:06:0D:B7:41:75:3B:E7:24:DC:3E:ED:CF:E1:ED:A7:E7
Certificate issuer:       /CN=674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7
Certificate serial:       31BDE43D7C17B5D4AF7858F1468327DA80CAF8EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.mft
Manifest number:          C1
Signing time:             Sat 20 Dec 2025 12:59:33 +0000
Manifest this update:     Sat 20 Dec 2025 12:54:33 +0000
Manifest next update:     Sun 21 Dec 2025 15:42:33 +0000
Files and hashes:         1: 323830343a336337383a3a2f33322d313238203d3e20323636323134.roa (hash: UtCnfsLlLq839LX7kGQtJL6DnboWPQyew/fMqu4Kfsg=)
                          2: 674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.crl (hash: VnZg0BPm+bFx999yUeaxfM18fK/mNXX7tjj4qWFSlcw=)
                          3: 3139302e3132332e3230342e302f32322d3332203d3e20323636323134.roa (hash: kDITKnC+lJTSqSZ/KgOvBPKUKe7OmOt+6GVrO3qY9ng=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bd:e4:3d:7c:17:b5:d4:af:78:58:f1:46:83:27:da:80:ca:f8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7
        Validity
            Not Before: Dec 20 12:54:33 2025 GMT
            Not After : Dec 21 15:42:33 2025 GMT
        Subject: CN=47E123681D4B24CE47C0B430622E4C9F1FF876EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:17:8f:2f:e6:0b:7a:e6:9e:fc:31:ab:da:b5:
                    94:69:0f:85:60:6c:11:b4:22:a8:f8:fe:64:9b:d9:
                    4a:d9:53:30:ca:29:0c:57:72:6d:da:c9:bb:48:a5:
                    ba:9d:e6:14:d0:8e:9f:77:7c:7e:1d:50:c7:f1:22:
                    d0:f0:c0:8b:a9:db:99:02:10:5e:53:7e:cd:84:19:
                    2d:ac:b6:6e:60:88:c3:f2:30:fc:c6:43:4e:0c:a6:
                    3e:f3:01:9e:ae:e3:f5:13:18:b4:bd:e0:c5:fe:26:
                    8d:e0:8a:c4:65:d3:2e:e3:68:30:37:4e:dd:b0:ad:
                    28:22:fe:ba:ed:c5:d9:2a:82:a0:38:b2:eb:d8:d0:
                    54:47:51:86:d6:ed:e1:38:30:2f:24:17:a3:5b:8f:
                    e8:56:2e:61:b6:6a:e0:f3:a7:49:6f:bb:0e:3e:59:
                    de:45:b9:e2:e7:ec:27:71:6b:66:a1:e5:15:6d:a7:
                    a9:18:78:a5:2a:fc:b4:c4:44:48:07:94:d8:be:ef:
                    79:dd:77:f1:14:4d:eb:8f:2b:bd:c0:ec:e4:46:7c:
                    82:7c:58:63:c9:c0:44:06:83:74:58:d1:4c:9b:42:
                    f6:4a:a6:fe:38:65:e7:92:90:3e:0b:7e:32:29:8a:
                    79:a4:49:1b:eb:3c:1f:de:3f:45:31:7b:2e:ad:aa:
                    b9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E1:23:68:1D:4B:24:CE:47:C0:B4:30:62:2E:4C:9F:1F:F8:76:EA
            X509v3 Authority Key Identifier:
                keyid:67:4C:1E:AE:06:0D:B7:41:75:3B:E7:24:DC:3E:ED:CF:E1:ED:A7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89RaGzZUGim7LXQpSBtDNrPF3pkoV2tLVhdTRHfUhuDN/0/674C1EAE060DB741753BE724DC3EEDCFE1EDA7E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:22:17:a2:42:00:db:d6:43:06:24:2f:fd:d4:16:f5:60:
         07:c6:79:bd:d2:e4:60:b3:9c:c4:47:4d:2c:3b:1f:b3:62:50:
         1e:71:4b:3a:7c:a6:e2:5b:5a:07:6f:d7:35:87:e2:46:30:53:
         11:46:b4:cf:88:d6:c6:b8:d0:b5:c7:56:dc:91:dd:04:e2:d4:
         fb:e9:f7:30:0f:29:f9:a4:ed:cc:61:22:6b:74:b8:cc:42:f8:
         f2:04:1e:a8:b4:b4:76:2c:64:0d:68:1a:68:d1:9c:b9:0b:b4:
         a6:2f:e2:87:70:d3:90:79:f2:38:15:16:52:45:23:81:81:4e:
         2d:5c:f8:88:ba:9a:32:6c:69:78:1e:a9:be:0d:0b:e5:95:c4:
         d9:66:46:86:d4:30:fe:4f:9f:28:3d:99:5e:aa:95:c4:f0:6e:
         09:ec:2e:a5:6f:38:e2:b4:c9:c2:10:70:54:56:d7:43:5d:5a:
         61:30:a8:72:25:c4:ee:28:f7:a0:bd:54:9b:b0:3a:5a:83:58:
         1f:cf:6d:ef:0f:85:ed:10:6d:90:11:c9:13:bd:f6:8b:a7:35:
         df:b9:66:68:fb:28:97:ef:1a:c9:f6:01:f2:b3:0b:e3:29:9e:
         d8:8c:d7:9f:6a:f6:fe:f8:d0:08:df:a1:e1:22:0d:32:fc:0e:
         83:2f:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----